CVE-2008-1537

MEDIO 6.8CVE-2008-1537 · Published 28/03/2008 · updated 16/06/2026

In breve

CVE-2008-1537 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda powerbook (powerscripts).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.9%, superiore al 86.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
powerbook powerscripts	`= 1.21`	No fix yet

Description

Directory traversal vulnerability in pb_inc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.

References

secunia.com/advisories/29480
securityreason.com/securityalert/3783
securityfocus.com/archive/1/490008/100/0/threaded
securityfocus.com/bid/28418
exchange.xforce.ibmcloud.com/vulnerabilities/41393
exploit-db.com/exploits/5302

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free